I think my issue with cloudflare is not that I think they will compromise my data through their proxy to steal my passwords or go through my data, but that it seems quite likely given their ubiquity that the three letter agencies or similar have backdoor.

It’s similar with say Google, i.e. I probably trust cybersecurity at Google more than at bitwarden. Unfortunately Google mines the shit out of my data (shitty but not dangerous) and will probably hand over stuff to some authoritarian government if they asked for it (physically dangerous).